@dethos
Full-stack developer with special interest in cybersecurity.
Advocate of a free and safe Internet. Nature admirer and sports enthusiast.
No relay list published yet.
Recent Notes
Chat Control, mass surveillance, and then...
https://mastodon.online/@mullvadnet/116206184902355562
#eu #chatcontrol #mullvad
https://mastodon.online/@mullvadnet/116206184902355562
#eu #chatcontrol #mullvad
"The AWS Console and Terraform Security Gap"
https://blog.includesecurity.com/2026/02/the-aws-console-and-terraform-security-gap/
#aws #terraform #opentofu #security #infosec
https://blog.includesecurity.com/2026/02/the-aws-console-and-terraform-security-gap/
#aws #terraform #opentofu #security #infosec
❤️1
When does it go wrong, if ever?
When a vendor doesn't release the software using one of these methods. Curl bash is very common for example.
I usually try to find an alternative.
I usually try to find an alternative.
"Claude is an Electron App because we’ve lost native"
https://tonsky.me/blog/fall-of-native/
#software
https://tonsky.me/blog/fall-of-native/
#software
How do #linux people get their apps today?
What is good or painful about this approach?
What is a missed opportunity for app distribution on linux?
cc nostr:npub1x458tl7h9xcxa66vr4a8pg0h2qz96pnh...
I get it using the distro's package manager. That's it.
If something is not there, or I need a bleeding edge version, I use flatpak.
Overtime I found that this approach works very well for me.
If something is not there, or I need a bleeding edge version, I use flatpak.
Overtime I found that this approach works very well for me.
1
"Google API Keys Weren't Secrets. But then Gemini Changed the Rules."
https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules
#security #infosec #google
https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules
#security #infosec #google
""Made in EU" - it was harder than I thought."
https://www.coinerella.com/made-in-eu-it-was-harder-than-i-thought/
By the post content, **still worth it**.
#buyfromeu #techstack #cloud #europeanunion #europeanalternatives
https://www.coinerella.com/made-in-eu-it-was-harder-than-i-thought/
By the post content, **still worth it**.
#buyfromeu #techstack #cloud #europeanunion #europeanalternatives
"Leaking secrets from the claud"
https://ironpeak.be/blog/leaking-secrets-from-the-claud/
#security #ai #agents #softwaredevelopment
https://ironpeak.be/blog/leaking-secrets-from-the-claud/
#security #ai #agents #softwaredevelopment
"Spying Chrome Extensions: 287 Extensions spying on 37M users"
https://qcontinuum.substack.com/p/spying-chrome-extensions-287-extensions-495
Extensions should be few, installed carefully, and reviewed often.
#security #privacy #browsers #chrome
https://qcontinuum.substack.com/p/spying-chrome-extensions-287-extensions-495
Extensions should be few, installed carefully, and reviewed often.
#security #privacy #browsers #chrome
"We should all be using dependency cooldowns"
https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
#supplychain #security
https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
#supplychain #security
"Django security releases issued: 6.0.2, 5.2.11, and 4.2.28"
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
#django #python #security
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
#django #python #security